Malware is any software application which subverts the will of the legitimate owner of a computer, by means of force or subterfuge, with or without personal or monetary gain on the part of the creator.

learn more… | top users | synonyms (1)

-2
votes
0answers
11 views

How can I get rid of ogafdr.dll malware?

Every time my Windows 7 PC starts, Avast reports the following malicious process: C:\Program Files\cbe0a0d456caf9f5ffc42818634b4af9\d82a24b74d9073b29e5c73bb798c5253.exe The file reported by Avast ...
0
votes
3answers
68 views

How do botnets not get caught when using Gmail accounts for spamming?

Botnets are Spamming through web-mail services like gmail.com,hotmail.com,etc. by compromising email-accounts I read a post from this forum about how online accounts are compromised. Following are ...
0
votes
2answers
31 views

File types and ways that can infect Android devices with malware

From what sources can an Android device be infected with malware? What various file types, executable or non executable, can infect an Android device with malware?
1
vote
1answer
47 views

What to do with an APK file containing Swf.Exploit.CVE_2015_0323-1 and ELF File?

I received an APK file from a source. Prior to installation, I ran a virus scan on it. The result had following main features: The file contained Swf.Exploit.CVE_2015_0323-1 It required ...
0
votes
1answer
11 views

Tencent/Safefinder Identify and remove malware [duplicate]

I wasn't paying attention when downloading some apps today and have successfully installed some malware on my PC. I had Safefinder installed and I am currently removing its components and running ...
-3
votes
0answers
66 views

Malware available to the average person [on hold]

What are the types of malware that are available to the average person? What are their capabilities? By average person I mean: Someone who doesn't have a deep understanding about ...
6
votes
1answer
182 views

What do I need to do when Facebook says: “Your computer needs to be cleaned”?

I am not sure if this is the correct community for this post. If not please refer me to the correct one. I am getting a "Your computer needs to be cleaned" error message when trying to login into ...
3
votes
1answer
54 views

Revising Phising Email & it's payload… did I do this right?

Recently my company got a widespread phishing email sent to them, thankfully no one clicked the link (which is great!) Since I'm a student and a current intern working in IT Security I wanted to see ...
1
vote
1answer
188 views

Privacy error in google chrome

Recently I installed some random softwares on my windows 8.1 PC from the internet and along with that some malware also got installed. I started getting " Your connection is not private " error in ...
0
votes
0answers
21 views

Add new vulnerabilty module on honeypot dionaea

I want to install dionaea but i am not sure about it's capability to collect modern malware. I see that it use old vulnerabilities modules. My questions are: 1) It is possible to add new ...
-1
votes
0answers
54 views

Hacked site/hosting? Or hacked browser?

I need some help. I have a security plugin installed and I received an email notification telling me that A file change was detected on my system for my site. I logged in and noticed no unusual ...
0
votes
1answer
84 views

Is Qt framework is under attack or it has something suspicious (only in free version)

I was trying to download Qt framework. I went to its Official site (I'm sure, I checked in Wikipedia) for Visual Studio. But when attempting to download Qt for Windows, my Firefox shows this message: ...
-2
votes
0answers
45 views

Does anybody knows a good dataset for malware families? [closed]

Does anybody knows a good dataset for malware families? What i need is a dataset where malware are already classified in families.
0
votes
2answers
90 views

Firefox and chrome infected with hohosearch and newsearch123.com [duplicate]

A fortnight before, I downloaded a keygen file, which I presumed to be fine, but when I started the installation, I felt there is something weird. So I was about to start the installation, but I ...
7
votes
1answer
207 views

Is NoScript bad? [on hold]

I just came to know about NoScript, but after installing it opened the author's homepage with an advert for 'SpeedUpMyPC' that pointed to a UniBlue website, which I found fishy. Googling turned up ...
4
votes
1answer
101 views

How to protect TimeMachine backups from Ransomware?

According to Heise (German) Time Machine backups can be encrypted by Ransomware. Sorry I didn't find an English source, please use Google translate. KeRanger had an inactive module ...
0
votes
2answers
90 views

How could one say that older operating systems are more vulnerable?

Experiment conducted by me in Windows using Virtual Machine: I have collected all rogue security software that target a range of Windows versions and several latest malware (no older than a month) ...
0
votes
0answers
29 views

Is it suspicious that mail server sends traffic to Tor Exit node?

I am monitoring the outbound traffic from mail server through IDS and recently I observed there were some traffic sending to Tor Exit nodes from mail server, for example, IP 46.183.85.124. After doing ...
5
votes
4answers
260 views

How can I safely test malware in a VM? [duplicate]

This question has probably been asked several times here, but I'll ask it a bit differently. I am trying to learn about malware and how it infects computers and how to disinfect a computer if one ...
3
votes
0answers
37 views

How to detect suspicious content in a TrueType Font (.ttf) font file

I got curious about how to scan or assess the risk of a particular font file before deploying it to hosts. First line of defense, of course, is to make sure that our hosts are patched against any ...
0
votes
1answer
136 views

Preventing uploads of malware to server by changing all extentions to PNG?

Ok, so I have my own website, and you can use the file upload quite a bit, and it is very important to the site. However, I've been hearing that clients can still bypass a file extension restrictions ...
1
vote
1answer
63 views

How can I get infected by computer viruses? [duplicate]

I would call my self a security aware computers professional, and I was asking my self for a long time now allready. How can it be that male-ware gets onto my computer wihtout me actively playing it ...
1
vote
0answers
49 views

How does a malware overcomes this facility

I've seen many viruses/malicious VB scripts get executed when accidentally double clicked or through fake shortcuts redirecting to some viruses causing the Victim's PC a serious damage. But nowadays ...
1
vote
0answers
31 views

Polymorphic Analysis

I'm a beginner at malware analysis. For my research studies, I have to identify polymorphic malware based from experiments. I would like to know if there are any guides showing how to analyze the code ...
2
votes
2answers
144 views

Suspicious Network Activity - is my system compromised?

When using Firefox to open a blank page, I have a weird network connection that shows under Network Activity in Resource Monitor (Windows 7). The address is: insiders-guide.pacedev.com. A ...
3
votes
2answers
94 views

My cellphone is infected, and it keeps coming back

Please bear with me as English is not my native language My Android smartphone downloads apps automatically without any interaction. Generally the apps are known but some are unknown apps. I can only ...
21
votes
2answers
3k views

How do I remove my website from the malware database?

I have a website which is basically a service platform. As far as I know there is no malware in my website (at least not found according to these free scanners). However, Check Point malware database ...
3
votes
3answers
87 views

Does typical Ransomware only 'attack' certain folders/filetypes

I expect this is very much on a per malware and OS basis so could potentially be very broad hence the typical. A user's computer has been infected by a piece of malware which aims to encrypt all ...
3
votes
2answers
54 views

Is there any chance of PC getting infected when you analyse PCAP malware file?

Currently, there are lots of pcap files of malware analysis carried by other researchers available on Internet. Such files show the traffic pattern and communication of the malware with it's C&C ...
0
votes
0answers
30 views

Can a virus execute without user interaction? [duplicate]

I have seen a lot of malware infection techniques where the user is infected by drive by downloads through browser vulnerabilities or social engineering. But is there a way that a virus could execute ...
37
votes
5answers
5k views

How do I safely inspect a potentially malicious website?

Sometimes I'm interested in what's behind a malicious website. How do I stay on the safe side if I decide to inspect? I'm searching for methods that are quicker and more simple than running the ...
0
votes
1answer
98 views

website - infected by malware and if yes, how can I treat it? [closed]

A friend told me that the website of our association, here , got blocked by the corporate network of the company he is working for, due to malware (see picture below) I've tried a few website like ...
2
votes
2answers
54 views

Protect against virus and malware attacks from website ads with iptables

Lots of websites spread malware by publishing advertisements that distribute malware. Even YouTube's ad network has been compromised in the past. Browser ad blockers and related plugins have there own ...
-2
votes
0answers
14 views

Computer infected with Skeeyah.A!bit [migrated]

Today I did a virus lookup for my relative via Windows Defender, and it found an Skeeyah.A!bit trojan. Windows Defender has deleted it, and even after reboot he didn't find traces of that trojan. ...
0
votes
2answers
166 views

Why don't the majority of today's malware use strong cryptography?

While reading another story of botnet takedown, my wondering has reached its apogee: Why don't malware authors use cryptography (encryption + signing) provided by good libraries when their creations ...
-3
votes
0answers
29 views

Rogue file appears over and over again, how to fix security [duplicate]

I've been trying to get rid of several rogue files that appear in my website file directories. I run a cronjob to check for any file changes and delete them every time the cron job catches them. I've ...
13
votes
2answers
654 views

Advertisement on Skype tried to download a file to my computer using Javascript

I usually have Skype running in the background. If you have ever used Skype before, you probably know it has advertisements. One of these advertisements made two windows pop up on my screen, asking to ...
0
votes
1answer
74 views

mail.ru and slightsearch.ru hijacking browser default search engine set by admin

I recently got malware installed on my PC that contained software that infected my google chrome, by hijacking my default search engine. I tried: Removing newly installed programs from PC, using ...
17
votes
2answers
477 views

Do the most common ransomware programs delete the original files as they go, or in a big bulk delete at the very end?

I'm talking about the most common varieties like Cryptolocker, Cryptowall, Torrentlocker, KeRanger, RSA4096, etc. (There is not necessarily a need to answer for all of these, one or two may do.) If ...
5
votes
3answers
151 views

Mitigating the risk for a successful ransomware infection

The company I work for has been getting hit with loads and loads of frightfully sophisticated ransomware spam lately, people masking as consultants, customers, very specific company requests, etc. ...
0
votes
1answer
30 views

How to safely exchange functionality of a file between two computers?

I have two computers and the goal is to move a functionality of a given file from computer A to computer B. The file is supposed to have a certain known functionality but it potentially could expose ...
139
votes
8answers
16k views

What should you do if you catch ransomware mid-operation?

You boot up your computer one day and while using it you notice that your drive is unusually busy. You check the System Monitor and notice that an unknown process is using the CPU and both reading and ...
0
votes
0answers
53 views

Do these DNS requests seem like Conficker/Torpig-like behaviour?

I'm at my wit's end on this one... I have been seeing weird traffic from an IP on a client's local network and I think the host is malicious. Looking at the traffic it is producing, is always ...
1
vote
2answers
35 views

Random autofill [closed]

I was trying to pay for something just now, and when I put my name in the chrome autofill came up and I clicked it. The address that showed up was wrong though but corresponded to the postcode of one ...
8
votes
2answers
2k views

Will completely wiping your hard drive remove all malware? [duplicate]

I recently bought a new computer. Now I want to convert my old PC into a Linux system. However, I want to start completely fresh and not bring over any malware. I am already planning to wipe ...
-3
votes
1answer
59 views

How can a polymorphic virus decrypt and execute portions of the code during runtime?

I found this article about a polymorphic virus that encrypted and decrypted itself during runtime. The article said that the only non-encrypted part was a stub that decrypted the next part of the ...
2
votes
1answer
149 views

Could someone help me deobfuscate this malicious script code [duplicate]

Two months ago one of our Wordpress sites was infested through and through. This was at the same time I started working at this company. Our main platform is Plone, but I guess they did some on the ...
0
votes
2answers
70 views

Malware able to “read” one's screen

I was searching online about multifactor authentication. One of the reasons that people recommend it is because they fear someone may use a keylogger to "steal" their password, so they use one more ...
0
votes
2answers
68 views

Malware or viruses by browser redirects?

Recently was browsing and clicked on a link to the following address: (In code blocks so you cant accidently click it) http://paycheck-calculator.org/ Clicking on this quickly loaded 2-3 different ...
3
votes
2answers
136 views

Android Malware Dataset

I am working on a project to identify the author of the malicious apk. To test my results I need dataset of malicious apks along with their authors. Currently I am working on a dataset which is very ...